» insthelper.exe
Overview
Analysis
File Details
Programs (1)

insthelper.exe

PAYBACK Toolbar

Payback GmbH

This is a self-extracting archive and installer. This is installed with PAYBACK Toolbar 1.2.

File name:

insthelper.exe

Publisher:

Payback GmbH (signed and verified)

Product:

PAYBACK Toolbar

Description:

PAYBACK Toolbar Installer/Deinstaller

Version:

1.2.0.1

MD5:

827b8d90718db93bf1f346b885b87f34

SHA-1:

76a5a278c1fffc44ffae1241783029ea5a143641

SHA-256:

4df209df05db3ec7e6c5db4b6a4ebe2a2ec6dbe160cd9d02f1380670f32a69e6

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

7/13/2025 5:40:40 AM UTC (today)

File size:

232.6 KB (238,136 bytes)

Product version:

1.2.0.1

Original file name:

insthelper.exe

File type:

Executable application (Win32 EXE)

Language:

German (Germany)

Common path:

C:\Program Files\payback\payback toolbar\insthelper.exe

Digital Signature

Signed by:

Payback GmbH

Authority:

VeriSign, Inc.

Valid from:

8/1/2011 2:00:00 AM

Valid to:

8/19/2013 1:59:59 AM

Subject:

CN=Payback GmbH, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Payback GmbH, L=Munich, S=Bavaria, C=DE

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

76A73BB948D697378248C6A1B7B9C374

File PE Metadata

Compilation timestamp:

5/25/2012 1:51:41 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

3072:R0rygsDvlece7sLBhYggin2psHfcygiCbJzBsAKgYXZnTfoOZYsxLJ376:eygsDteceoLB5LL6IhYCm

Entry address:

0x9CDB

Entry point:

E8, C0, 6E, 00, 00, E9, 79, FE, FF, FF, CC, CC, CC, 68, 50, 9D, 40, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 84, 62, 43, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 83, EC, 18, 53, 8B, 5D... 
[+]

Code size:

123 KB (125,952 bytes)

The file insthelper.exe has been discovered within the following program.

PAYBACK Toolbar 1.2 by PAYBACK GmbH

As part of the installation process PAYBACK Toolbar may offer changes to your Internet Browser settings. These changes if approved by you can be reconfigured by you at any time from the options dialog available on your Internet Browser.

www.payback.de

53% remove it

Scan insthelper.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.